Antivirus Version Last Update Result a-squared 4.5.0.50 2010.05.10 - AhnLab-V3 2010.05.21.00 2010.05.20 - AntiVir 8.2.1.242 2010.05.20 - Antiy-AVL 2.0.3.7 2010.05.19 - Authentium 5.2.0.5 2010.05.21 - Avast 4.8.1351.0 2010.05.20 - Avast5 5.0.332.0 2010.05.20 - AVG 9.0.0.787 2010.05.20 - BitDefender 7.2 2010.05.21 - CAT-QuickHeal 10.00 2010.05.21 - ClamAV 0.96.0.3-git 2010.05.21 - Comodo 4897 2010.05.21 - DrWeb 5.0.2.03300 2010.05.21 - eSafe 7.0.17.0 2010.05.20 - eTrust-Vet 35.2.7501 2010.05.20 - F-Prot 4.6.0.103 2010.05.20 - F-Secure 9.0.15370.0 2010.05.21 - Fortinet 4.1.133.0 2010.05.20 - GData 21 2010.05.21 - Ikarus T3.1.1.84.0 2010.05.21 - Jiangmin 13.0.900 2010.05.20 - Kaspersky 7.0.0.125 2010.05.21 - McAfee 5.400.0.1158 2010.05.21 - McAfee-GW-Edition 2010.1 2010.05.20 - Microsoft 1.5802 2010.05.20 - NOD32 5133 2010.05.20 - Norman 6.04.12 2010.05.20 - nProtect 2010-05-20.02 2010.05.20 - Panda 10.0.2.7 2010.05.20 - PCTools 7.0.3.5 2010.05.21 - Prevx 3.0 2010.05.21 - Rising 22.48.04.03 2010.05.21 - Sophos 4.53.0 2010.05.21 - Sunbelt 6332 2010.05.21 - Symantec 20101.1.0.89 2010.05.21 - TheHacker 6.5.2.0.284 2010.05.20 - TrendMicro 9.120.0.1004 2010.05.21 - TrendMicro-HouseCall 9.120.0.1004 2010.05.21 - VBA32 3.12.12.5 2010.05.20 - ViRobot 2010.5.20.2326 2010.05.20 - VirusBuster 5.0.27.0 2010.05.21 - Additional information File size: 583472 bytes MD5 : a836ce641b43c38c7bb87a6066ee89ed SHA1 : 4b22fc74c4ea92c322ff050005dcf5da053abc19 SHA256: 0c29e66881bc41e1aaf087b97310594e2d9a1ed6aa620efd007f44da2464342e PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x64F1C timedatestamp.....: 0x4B42E190 (Tue Jan 5 07:52:00 2010) machinetype.......: 0x14C (Intel I386) ( 5 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0x7558D 0x76000 5.32 72cad993f6fa39cf806aae613e2fc789 .rdata 0x77000 0xC58C 0xD000 3.56 1b445c7e4c115f5b7363c3875002bb78 .data 0x84000 0x21E4 0x2000 1.94 33ab8715dcdb462761189f7ac6905736 .idata 0x87000 0x4A27 0x5000 4.94 586d051a71c6ae5d93f5829f07c5b5f8 .rsrc 0x8C000 0x1A5C 0x2000 3.44 e931d6ee33568c99f990825e8ecbe88d ( 11 imports ) > advapi32.dll: RegSetValueExW, RegisterServiceCtrlHandlerW, DeregisterEventSource, ReportEventW, RegisterEventSourceW, SetServiceStatus, RegCloseKey, RegOpenKeyExW, RegQueryValueExW, CloseServiceHandle, CreateServiceW, OpenSCManagerW, RegDeleteKeyW, ConvertStringSecurityDescriptorToSecurityDescriptorW, GetSecurityDescriptorSacl, SetSecurityInfo, StartServiceCtrlDispatcherW, RegCreateKeyExW, RegDeleteValueW, OpenServiceW, ControlService, DeleteService > atl71.dll: -, -, -, -, -, -, -, -, -, -, -, - > kernel32.dll: LeaveCriticalSection, EnterCriticalSection, LocalFree, OpenEventW, MapViewOfFile, CreateFileMappingW, GetExitCodeProcess, FindClose, FindNextFileW, FindFirstFileW, RaiseException, VirtualQuery, IsBadCodePtr, CreateDirectoryW, GetFileAttributesW, lstrcatW, GetTempPathW, SuspendThread, ResumeThread, ResetEvent, GetModuleHandleW, WritePrivateProfileStringW, SetCurrentDirectoryW, RemoveDirectoryW, SetFileAttributesW, DeleteFileW, SetLastError, FormatMessageW, GetProcessHeap, HeapFree, GetCurrentProcess, HeapAlloc, GetModuleFileNameA, GetSystemTimeAsFileTime, GetCurrentProcessId, QueryPerformanceCounter, DebugBreak, LoadLibraryA, GetPrivateProfileStringW, MultiByteToWideChar, lstrlenA, GetSystemDirectoryW, CopyFileW, InitializeCriticalSection, DeleteCriticalSection, WaitForSingleObject, CreateEventW, CreateThread, lstrcpyW, Sleep, GetCurrentThreadId, GetModuleFileNameW, GetCommandLineW, FreeLibrary, GetLastError, WideCharToMultiByte, lstrlenW, GetTickCount, CreateMutexW, GetThreadLocale, GetLocaleInfoA, ExitProcess, GetStartupInfoW, GetModuleHandleA, GetVersionExA, GetACP, InterlockedExchange, GetVersionExW, InterlockedDecrement, InterlockedIncrement, OpenMutexW, WaitForMultipleObjects, SetEvent, CloseHandle, UnmapViewOfFile, LoadLibraryW, GetCurrentDirectoryW, GetProcAddress > msvcp71.dll: _assign@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV12@PBDI@Z, __0_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QAE@PB_WI@Z, _resize@_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QAEXI@Z, __Unlock@_Mutex@std@@QAEXXZ, __Lock@_Mutex@std@@QAEXXZ, __Id_cnt@id@locale@std@@0HA, _clear@ios_base@std@@QAEXH_N@Z, __$_M_WU_$char_traits@_W@std@@V_$allocator@_W@1@@std@@YA_NABV_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@0@0@Z, __$_9_WU_$char_traits@_W@std@@V_$allocator@_W@1@@std@@YA_NABV_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@0@0@Z, _find@_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QBEI_WI@Z, _reserve@_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QAEXI@Z, __Nomemory@std@@YAXXZ, _rfind@_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QBEI_WI@Z, _str@_$basic_stringstream@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBE_AV_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@2@XZ, _assign@_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z, __4_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QAEAAV01@PB_W@Z, _c_str@_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QBEPB_WXZ, __1_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QAE@XZ, __Y_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QAEAAV01@PB_W@Z, __0_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QAE@ABV01@@Z, __0_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QAE@PB_W@Z, __1_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@XZ, __0_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@PBD@Z, __0_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@ABV01@@Z, _c_str@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBEPBDXZ, __0_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@XZ, ___D_$basic_stringstream@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEXXZ, __6_$basic_ostream@DU_$char_traits@D@std@@@std@@QAEAAV01@H@Z, __$_6U_$char_traits@D@std@@@std@@YAAAV_$basic_ostream@DU_$char_traits@D@std@@@0@AAV10@PBD@Z, __0_$basic_stringstream@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@H@Z, __Y_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV01@PBD@Z, __Y_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV01@ABV01@@Z, __A_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAADI@Z, _length@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBEIXZ, _clear@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEXXZ, _resize@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEXI@Z, __0_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@ID@Z, __4_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV01@ABV01@@Z, __Tidy@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@IAEX_NI@Z, __0_$_String_val@DV_$allocator@D@std@@@std@@IAE@V_$allocator@D@1@@Z, _assign@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV12@ID@Z, ___D_$basic_stringstream@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QAEXXZ, _str@_$basic_stringstream@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QBE_AV_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@2@XZ, __6_$basic_ostream@_WU_$char_traits@_W@std@@@std@@QAEAAV01@H@Z, __$_6_WU_$char_traits@_W@std@@@std@@YAAAV_$basic_ostream@_WU_$char_traits@_W@std@@@0@AAV10@PB_W@Z, __0_$basic_stringstream@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QAE@H@Z, __6_$basic_ostream@DU_$char_traits@D@std@@@std@@QAEAAV01@K@Z, __Y_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z, _setstate@_$basic_ios@_WU_$char_traits@_W@std@@@std@@QAEXH_N@Z, _width@ios_base@std@@QAEHH@Z, __A_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QBEAB_WI@Z, _eq_int_type@_$char_traits@_W@std@@SA_NABG0@Z, _eof@_$char_traits@_W@std@@SAGXZ, _sputc@_$basic_streambuf@_WU_$char_traits@_W@std@@@std@@QAEG_W@Z, _rdbuf@_$basic_ios@_WU_$char_traits@_W@std@@@std@@QBEPAV_$basic_streambuf@_WU_$char_traits@_W@std@@@2@XZ, _fill@_$basic_ios@_WU_$char_traits@_W@std@@@std@@QBE_WXZ, _flags@ios_base@std@@QBEHXZ, _width@ios_base@std@@QBEHXZ, _size@_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QBEIXZ, _flush@_$basic_ostream@_WU_$char_traits@_W@std@@@std@@QAEAAV12@XZ, _tie@_$basic_ios@_WU_$char_traits@_W@std@@@std@@QBEPAV_$basic_ostream@_WU_$char_traits@_W@std@@@2@XZ, _good@ios_base@std@@QBE_NXZ, __Osfx@_$basic_ostream@_WU_$char_traits@_W@std@@@std@@QAEXXZ, _uncaught_exception@std@@YA_NXZ, __Lock@_$basic_streambuf@_WU_$char_traits@_W@std@@@std@@QAEXXZ, __Unlock@_$basic_streambuf@_WU_$char_traits@_W@std@@@std@@QAEXXZ, __6_$basic_ostream@_WU_$char_traits@_W@std@@@std@@QAEAAV01@K@Z, _empty@_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QBE_NXZ, __4_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z, __0_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QAE@XZ, __$_5_WU_$char_traits@_W@std@@@std@@YAAAV_$basic_istream@_WU_$char_traits@_W@std@@@0@AAV10@PA_W@Z, __0_$basic_stringstream@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QAE@ABV_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@1@H@Z, _clear@_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QAEXXZ, __$_9_WU_$char_traits@_W@std@@V_$allocator@_W@1@@std@@YA_NABV_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@0@PB_W@Z, __A_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QAEAA_WI@Z, _length@_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QBEIXZ, _substr@_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QBE_AV12@II@Z, _find_last_not_of@_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QBEI_WI@Z, _npos@_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@2IB, _find_first_not_of@_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QBEI_WI@Z, __Y_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV01@D@Z, __0_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QAE@I_W@Z, __Y_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QAEAAV01@_W@Z, _setstate@_$basic_ios@DU_$char_traits@D@std@@@std@@QAEXH_N@Z, _append@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV12@ID@Z, _is@_$ctype@D@std@@QBE_NFD@Z, _to_char_type@_$char_traits@D@std@@SADABH@Z, _eq_int_type@_$char_traits@D@std@@SA_NABH0@Z, _eof@_$char_traits@D@std@@SAHXZ, _snextc@_$basic_streambuf@DU_$char_traits@D@std@@@std@@QAEHXZ, _sgetc@_$basic_streambuf@DU_$char_traits@D@std@@@std@@QAEHXZ, _rdbuf@_$basic_ios@DU_$char_traits@D@std@@@std@@QBEPAV_$basic_streambuf@DU_$char_traits@D@std@@@2@XZ, _max_size@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBEIXZ, _erase@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV12@II@Z, _npos@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@2IB, __1locale@std@@QAE@XZ, _getloc@ios_base@std@@QBE_AVlocale@2@XZ, __Ipfx@_$basic_istream@DU_$char_traits@D@std@@@std@@QAE_N_N@Z, __Unlock@_$basic_streambuf@DU_$char_traits@D@std@@@std@@QAEXXZ, __Lock@_$basic_streambuf@DU_$char_traits@D@std@@@std@@QAEXXZ, __1_Lockit@std@@QAE@XZ, __Register@facet@locale@std@@QAEXXZ, __Incref@facet@locale@std@@QAEXXZ, __Getcat@_$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z, __Getfacet@locale@std@@QBEPBVfacet@12@I@Z, __Bid@locale@std@@QAEIXZ, _id@_$ctype@D@std@@2V0locale@2@A, __0_Lockit@std@@QAE@H@Z, _widen@_$basic_ios@DU_$char_traits@D@std@@@std@@QBEDD@Z, _size@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBEIXZ, _sbumpc@_$basic_streambuf@DU_$char_traits@D@std@@@std@@QAEHXZ, _to_int_type@_$char_traits@D@std@@SAHABD@Z, __A_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBEABDI@Z, _sputc@_$basic_streambuf@DU_$char_traits@D@std@@@std@@QAEHD@Z, _fill@_$basic_ios@DU_$char_traits@D@std@@@std@@QBEDXZ, _flush@_$basic_ostream@DU_$char_traits@D@std@@@std@@QAEAAV12@XZ, _tie@_$basic_ios@DU_$char_traits@D@std@@@std@@QBEPAV_$basic_ostream@DU_$char_traits@D@std@@@2@XZ, __Osfx@_$basic_ostream@DU_$char_traits@D@std@@@std@@QAEXXZ, _append@_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QAEAAV12@I_W@Z, _is@_$ctype@_W@std@@QBE_NF_W@Z, _to_char_type@_$char_traits@_W@std@@SA_WABG@Z, _snextc@_$basic_streambuf@_WU_$char_traits@_W@std@@@std@@QAEGXZ, _sgetc@_$basic_streambuf@_WU_$char_traits@_W@std@@@std@@QAEGXZ, _max_size@_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QBEIXZ, _erase@_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QAEAAV12@II@Z, __Ipfx@_$basic_istream@_WU_$char_traits@_W@std@@@std@@QAE_N_N@Z, __Getcat@_$ctype@_W@std@@SAIPAPBVfacet@locale@2@@Z, _id@_$ctype@_W@std@@2V0locale@2@A, _widen@_$basic_ios@_WU_$char_traits@_W@std@@@std@@QBE_WD@Z, _sbumpc@_$basic_streambuf@_WU_$char_traits@_W@std@@@std@@QAEGXZ, _to_int_type@_$char_traits@_W@std@@SAGAB_W@Z, _assign@_$basic_string@_WU_$char_traits@_W@std@@V_$allocator@_W@2@@std@@QAEAAV12@PB_W@Z, __6_$basic_ostream@_WU_$char_traits@_W@std@@@std@@QAEAAV01@J@Z > msvcr71.dll: _ltow, _controlfp, __security_error_handler, __set_app_type, __p__fmode, __p__commode, _adjust_fdiv, __setusermatherr, _initterm, __wgetmainargs, _amsg_exit, _wcmdln, exit, _cexit, _XcptFilter, _exit, __CxxFrameHandler, __3@YAXPAX@Z, _CxxThrowException, __0exception@@QAE@ABV0@@Z, __1exception@@UAE@XZ, __0exception@@QAE@XZ, memset, sprintf, ___V@YAXPAX@Z, strlen, _putws, vswprintf, wcscat, wcscpy, _except_handler3, wcslen, fclose, fgetws, _wfopen, fwprintf, fwrite, fread, fopen, _wcsicmp, __0bad_cast@@QAE@ABV0@@Z, __1bad_cast@@UAE@XZ, __0bad_cast@@QAE@PBD@Z, free, _purecall, memcmp, swprintf, memcpy, wcsrchr, wcschr, fgetwc, swscanf, _ultoa, _ultow, _ltoa, _itoa, _ui64toa, _ui64tow, _i64toa, _i64tow, atol, _wtol, _atoi64, _wtoi64, sscanf, _stricmp, memmove, realloc, malloc, _callnewh, _CRT_RTC_INIT, __1type_info@@UAE@XZ, __dllonexit, _onexit, _terminate@@YAXXZ, _c_exit > ole32.dll: CoUninitialize, IIDFromString, StringFromIID, CoTaskMemFree, StringFromGUID2, CLSIDFromString, CoCreateInstance, CoInitialize > oleaut32.dll: -, -, -, -, - > shell32.dll: SHGetSpecialFolderPathW, ShellExecuteExW > shlwapi.dll: PathFindFileNameW, PathRemoveFileSpecW > user32.dll: MessageBoxW, LoadStringW, GetMessageW, TranslateMessage, UnregisterClassW, UnregisterClassA, CharUpperW, CharNextW, DispatchMessageW, PostThreadMessageW > version.dll: GetFileVersionInfoW, VerQueryValueW, GetFileVersionInfoSizeW ( 0 exports ) TrID : File type identification Win32 Executable Generic (68.0%) Generic Win/DOS Executable (15.9%) DOS Executable Generic (15.9%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) ssdeep: 12288:nrYViA3yOYt9nIp5lxeSZsWDf2hmVsoP:rCiAyfnAehWDO0 sigcheck: publisher....: _____________ copyright....: Copyright (c) 2003-2009 _____________ product......: ThunderService ____ description..: ThunderService original name: ThunderService internal name: ThunderService file version.: 1, 0, 2, 61 comments.....: n/a signers......: ShenZhen Thunder Networking Technologies Ltd. VeriSign Class 3 Code Signing 2009 CA Class 3 Public Primary Certification Authority - G2 signing date.: 8:23 AM 1/6/2010 verified.....: - PEiD : - RDS : NSRL Reference Data Set -